Privacy Policy

Last updated: 2 August 2026

Introduction and Identity of the Controller
Scope of this Policy
Data We Collect
How We Collect Data
Purposes and Legal Bases for Processing
Data Retention
Sharing of Personal Data
International Transfers
Data Security
Children's Privacy
Cookies
Third-Party Websites
Your GDPR Rights
Supervisory Authority
Changes to this Policy

1. Introduction and Identity of the Controller

KHT Connect ("we", "us", "our") is the data controller responsible for personal data collected through the website at khtconnect.online (the "Site"). We are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Estonian law, including the Personal Data Protection Act (isikuandmete kaitse seadus) and the Electronic Communications Act (elektroonilise side seadus).

Controller contact details:
KHT Connect
Varbola tn 3, Tallinn 10914, Estonia
Email: info@khtconnect.online

2. Scope of this Policy

This Privacy Policy applies to personal data processed through the Site and through any enquiries, contact forms, or correspondence directed to us via email at info@khtconnect.online. It covers personal data about visitors, prospective clients, partners, and other individuals who interact with us.

3. Data We Collect

We may collect the following categories of personal data:

Contact and identity data: your name, email address, job title, company name, and industry sector, provided through our enquiry form or by email;
Communication data: the content of messages you send us, including any service enquiries or preferences described;
Technical data: IP address, browser type and version, operating system, device type, referring page, pages visited, time and date of visits — collected through server logs and, where consented, analytics cookies;
Cookie and preference data: your cookie consent status, recorded in your browser's localStorage (key: kht_cookie_consent).

We do not collect any special categories of personal data (such as health data, racial or ethnic origin, political opinions, or religious beliefs).

4. How We Collect Data

We collect personal data in the following ways:

Directly from you when you complete and submit a contact or enquiry form on the Site, or when you email us at info@khtconnect.online;
Automatically through server logs and, where you have given consent, through analytics cookies that track how you interact with the Site.

5. Purposes and Legal Bases for Processing

We process personal data only where we have a valid legal basis under Article 6 GDPR:

Responding to enquiries — to respond to questions and service requests submitted through the Site or by email. Legal basis: legitimate interests (Art. 6(1)(f) GDPR) in communicating with prospective clients and partners, or pre-contractual steps (Art. 6(1)(b)) where applicable;
Operating the Site — to maintain the technical functioning of the Site, including security logging. Legal basis: legitimate interests (Art. 6(1)(f)) in operating a secure and functioning website;
Analytics — to understand how visitors use the Site and improve content. Legal basis: consent (Art. 6(1)(a)) obtained via the cookie consent banner;
Legal compliance — to comply with applicable law, regulatory requirements, or legal process. Legal basis: legal obligation (Art. 6(1)(c)).

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy:

Enquiry and contact data: retained for up to 2 years from last contact, unless a longer retention period is required for legal or business purposes;
Server and technical logs: retained for up to 12 months;
Analytics data: retained in accordance with the terms of the analytics provider, typically 14 months, where consented;
Cookie consent records: stored locally in your browser until you clear your browser data or withdraw consent.

When data is no longer needed, it is securely deleted or anonymised.

We do not sell, rent, or trade personal data. We may share data with:

Service providers and processors acting on our behalf, such as website hosting providers, email services, and analytics platforms, bound by appropriate data processing agreements;
Professional advisers such as lawyers or accountants, where required, under duties of confidentiality;
Competent authorities such as courts, regulators, or law enforcement, where legally required or to protect rights.

Any third-party processors are required to implement appropriate security measures and to process data only on our documented instructions.

8. International Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) or the recipient country's adequacy decision. As an Estonian company, our primary operations are within the EU/EEA.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These include secure server infrastructure, access controls, and limited sharing on a need-to-know basis. However, no internet transmission is entirely secure; you provide data at your own risk.

10. Children's Privacy

Our Site and services are intended for business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 16. If you become aware that a minor has submitted personal data to us, please contact us at info@khtconnect.online and we will delete it promptly.

11. Cookies

We use cookies and similar technologies on this Site. Your cookie consent is stored locally in your browser under the key kht_cookie_consent. You can withdraw consent at any time by clicking Cookie Preferences in the footer of any page. For full details of cookies used, see our Cookie Policy.

12. Third-Party Websites

The Site may link to third-party websites. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any external sites you visit.

13. Your GDPR Rights

Under GDPR and applicable Estonian law, you have the following rights regarding your personal data. To exercise any right, contact us at info@khtconnect.online. We will respond within one month (extendable to three months for complex requests).

Your Data Subject Rights

Right of Access (Art. 15)

You may request a copy of the personal data we hold about you and information about how we process it.

Right to Rectification (Art. 16)

You may request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure (Art. 17)

You may request deletion of your personal data where it is no longer necessary for the purpose collected, where you withdraw consent (where consent was the basis), or where processing was unlawful.

Right to Restriction (Art. 18)

You may request that we restrict processing of your data while a dispute about accuracy or a legitimate interests objection is pending.

Right to Data Portability (Art. 20)

Where processing is based on consent or contract and carried out by automated means, you may receive your data in a structured, machine-readable format.

Right to Object (Art. 21)

You may object at any time to processing based on legitimate interests, including profiling. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent (Art. 7(3))

Where processing is based on your consent (e.g. analytics cookies), you may withdraw consent at any time without affecting the lawfulness of prior processing.

Right to Lodge a Complaint (Art. 77)

You have the right to lodge a complaint with the Estonian Data Protection Authority (see section 14 below) if you believe your data rights have been infringed.

14. Supervisory Authority

The supervisory authority for data protection in Estonia is:

Andmekaitse Inspektsioon (AKI) — Estonian Data Protection Inspectorate
Tatari 39, 10134 Tallinn, Estonia
Website: www.aki.ee
Email: info@aki.ee

You may also use the EU Online Dispute Resolution platform: ec.europa.eu/consumers/odr.

15. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page reflects the current version. We encourage you to review this page periodically. Your continued use of the Site after updates are published constitutes acceptance of the revised Policy.